CLSA-2026-1792161665 TuxCare security update for @vitest/coverage-v8 (1 CVE)

TuxCare rebuilt @vitest/coverage-v8 to address 1 CVE. Fixed in 3.2.4-tuxcare.4...

CLSA-2026-1792161664 TuxCare security update for @vitest/coverage-v8 (1 CVE)

TuxCare rebuilt @vitest/coverage-v8 to address 1 CVE. Fixed in 3.2.4-tuxcare.3...

CLSA-2026-1792161662 TuxCare security update for @vitest/coverage-v8 (2 CVEs)

TuxCare rebuilt @vitest/coverage-v8 to address 2 CVEs. Fixed in 3.2.4-tuxcare.2...

PT-2026-124214

TuxCare rebuilt @vitest/coverage-v8 to address 1 CVE. Fixed in 3.2.4-tuxcare.4...

PT-2026-124212

TuxCare rebuilt @vitest/coverage-v8 to address 2 CVEs. Fixed in 3.2.4-tuxcare.2...

PT-2026-124213

TuxCare rebuilt @vitest/coverage-v8 to address 1 CVE. Fixed in 3.2.4-tuxcare.3...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @aklesky/vitest-config (1.0.2) +32 more potentially affected by CVE-2026-53633 via @vitest/coverage-v8 (>=3.0.3, <=3.2.4)

@vitest/coverage-v8 NPM version =3.0.3, =0.0.1, =1.0.388, =0.13.0, =2.2.0-app-13.13.1, =21.0.0-alpha.26, =4.0.9, =3.5.49, =5.1.3, =40.1.0, =3.0.9, =3.0.0, =3.1.4 and more Source cves: CVE-2026-53633 Source advisory: SNYK:JS-VITESTCOVERAGEV8-17375132...

@baic/preset-yolk-taro-miniprogram (>=2.1.0-alpha.278, <=2.1.0-alpha.281), @baic/preset-yolk-umi-mobile (>=2.1.0-alpha.278, <=2.1.0-alpha.281) +23 more potentially affected by CVE-2026-53633 via @vitest/coverage-v8 (>=4.0.2, <=4.1.7)

@vitest/coverage-v8 NPM version =4.0.2, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =2.1.0-alpha.278, =0.0.1, =21.0.0-alpha.33, =1.0.1, =2.0.1, =2.0.1, =0.1.0, =1.2.0-alpha.35, =1.6.0-alpha.4 - @planvokter/riotplan-e2e 1.0.2-dev.0 - @planvokter/riotplan-mcp-http 1.1.4...

Malware in coverage-v8

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5833 Malicious code in coverage-v8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f834a92fcc0d512c74e8e4a449bb0b3fbd2f2e7d6718bf86996721c2adc1457 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coverage-v8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f834a92fcc0d512c74e8e4a449bb0b3fbd2f2e7d6718bf86996721c2adc1457 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...